Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa
File: 4642f7a4-313d-388a-a150-9b8b4a0751f5.roa (raw, json)
Hash identifier: nphmB4Jwtv80dm6pUj8PFnhJpLa/4c6bmM0A2Y3cpGU=
Subject key identifier: 9E:98:4F:DD:3E:31:C0:CF:60:19:EE:97:3A:99:2A:09:35:54:DE:00
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F5E2C56CCC883E953700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f5:e2:c5:6c:cc:88:3e:95:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=cb51d7f9-6a95-4875-9434-f84b9d19caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f4:98:8a:5e:6b:38:96:eb:d4:34:b2:64:92:
91:46:95:33:54:f5:27:d9:34:1e:1a:f7:25:f6:c5:
a9:ed:e6:70:7d:5b:f2:db:19:ee:b3:21:6c:98:29:
a9:8f:07:11:da:e2:9c:09:da:ef:eb:e7:69:0d:20:
6a:92:a0:80:fd:75:9a:16:55:1c:b9:5d:ec:39:fb:
23:d5:5a:88:e6:ac:88:6c:42:ea:3e:a8:38:0d:83:
8f:fa:2c:56:9f:81:23:86:d5:33:65:ab:23:97:ad:
48:ef:11:bf:02:db:7f:a3:42:09:41:03:10:a6:72:
5e:14:f8:db:11:8a:0b:53:02:9d:4d:e8:d4:13:81:
50:98:1d:01:fb:5d:f2:34:29:ff:ac:d4:0f:4c:8c:
7c:c6:21:f1:ff:c7:5c:d7:05:20:97:16:0a:5f:22:
1d:68:91:5f:4d:25:ae:be:f2:64:bf:ba:fc:01:e3:
f6:32:11:18:74:6a:9a:f9:37:58:50:e4:d0:4d:6a:
a6:97:5a:e2:b4:59:8a:e2:09:cb:16:fa:5f:1c:c6:
54:4a:fb:d2:64:80:96:3a:b6:77:ed:68:73:f9:8e:
d4:14:7a:71:9d:cb:7e:04:dd:d9:46:3b:05:9d:e4:
8b:59:e4:7a:18:d2:a9:82:12:68:de:35:4c:62:6a:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:4F:DD:3E:31:C0:CF:60:19:EE:97:3A:99:2A:09:35:54:DE:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:a3:cc:58:5a:31:93:60:40:7b:b3:ec:20:e8:da:86:2a:2f:
cf:83:e8:d6:0d:cd:bb:c8:95:5c:4c:47:f7:09:47:9c:d3:38:
eb:ee:77:d5:89:ff:06:d7:0a:37:87:77:43:65:1b:03:f4:f2:
9a:ac:cf:ac:ca:22:2e:ed:58:81:50:3a:7c:6d:d6:85:de:67:
f6:2f:d0:08:a3:e5:b2:bd:1e:f7:b4:b3:44:02:27:22:d6:10:
a5:7d:ae:dd:47:ac:82:68:3c:1e:15:76:0b:0a:1d:8f:59:51:
8d:08:79:0b:37:71:7b:6d:1c:ef:43:48:9d:ee:6a:04:6a:5e:
77:99:d9:cb:37:37:c6:8f:53:30:48:0c:0e:20:8e:64:be:73:
c7:ea:e6:ec:28:a4:fb:b1:06:68:48:7b:a3:8e:f0:8a:54:f1:
37:92:2d:85:cc:dc:47:aa:b8:94:ac:0a:98:20:f5:61:24:53:
c1:7d:41:ae:02:1a:ca:f7:dd:8f:d1:24:2a:89:0b:c8:7c:1b:
06:6c:3d:7b:98:5b:75:7f:e0:df:a3:64:dd:76:2a:7a:6b:8e:
97:74:fe:c8:6d:50:df:7d:8d:43:03:0c:ab:c5:7c:98:07:6a:
8b:b8:38:dc:21:f1:71:5b:9d:b3:ed:1e:66:ee:5c:11:72:49:
87:e1:0e:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPXixWzMiD6VNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
Y2I1MWQ3ZjktNmE5NS00ODc1LTk0MzQtZjg0YjlkMTljYWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vSYil5rOJbr1DSyZJKRRpUzVPUn2TQeGvcl
9sWp7eZwfVvy2xnusyFsmCmpjwcR2uKcCdrv6+dpDSBqkqCA/XWaFlUcuV3sOfsj
1VqI5qyIbELqPqg4DYOP+ixWn4EjhtUzZasjl61I7xG/Att/o0IJQQMQpnJeFPjb
EYoLUwKdTejUE4FQmB0B+13yNCn/rNQPTIx8xiHx/8dc1wUglxYKXyIdaJFfTSWu
vvJkv7r8AeP2MhEYdGqa+TdYUOTQTWqml1ritFmK4gnLFvpfHMZUSvvSZICWOrZ3
7Whz+Y7UFHpxnct+BN3ZRjsFneSLWeR6GNKpghJo3jVMYmpdTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6YT90+McDPYBnulzqZKgk1VN4AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDY0MmY3YTQtMzEzZC0z
ODhhLWExNTAtOWI4YjRhMDc1MWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJijzFhaMZNgQHuz7CDo2oYqL8+D6NYNzbvIlVxMR/cJR5zTOOvud9WJ
/wbXCjeHd0NlGwP08pqsz6zKIi7tWIFQOnxt1oXeZ/Yv0Aij5bK9Hve0s0QCJyLW
EKV9rt1HrIJoPB4VdgsKHY9ZUY0IeQs3cXttHO9DSJ3uagRqXneZ2cs3N8aPUzBI
DA4gjmS+c8fq5uwopPuxBmhIe6OO8IpU8TeSLYXM3EequJSsCpgg9WEkU8F9Qa4C
Gsr33Y/RJCqJC8h8GwZsPXuYW3V/4N+jZN12Knprjpd0/shtUN99jUMDDKvFfJgH
aou4ONwh8XFbnbPtHmbuXBFySYfhDoE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:54 2025 by rpki-client